Get the currently authenticated user

GET 
/api/auth/me

Get the currently authenticated user. The payload includes orgRoles — the ORG-WIDE (GLOBAL-scope) role names the caller holds in the active organisation (INF-322); the role field is the Directory profile role from identity metadata and carries no authorization meaning.

Request

Responses

200

Successful response

401

Unauthorized — authentication credentials are missing or invalid

403

Forbidden — the x-act-as-org selector named an organisation the caller is not an ACTIVE member of (or the caller lacks the required permission).